This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File:                     9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier:          qx1NHE0FhPIW/mAH7d7LXxPtoyZJgS9TSd7yM0OSwv8=
Subject key identifier:   09:47:5B:6F:29:07:0C:FA:6D:21:6D:79:94:2A:B9:E9:D7:E2:97:80
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer:       /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial:       019C213AE1AC1B4380A16D8DC84DCF546582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number:          1828
Signing time:             Tue 03 Feb 2026 02:00:32 +0000
Manifest this update:     Tue 03 Feb 2026 02:00:32 +0000
Manifest next update:     Wed 04 Feb 2026 02:00:32 +0000
Files and hashes:         1: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: I8HA2zE1W76IrGO2y2c1t6HfpPd/hDWSPm6vfx5YxLQ=)
                          2: DVhhYEUtlGY-o7FWTsaEjCsuSfM.roa (hash: 3BdDvo6VSykP4vfXUdkCcVvQTTeKHnDzmOoaSk9BBMM=)
                          3: GaY0PBVBeo4KpiNFKZ9BeK4puOg.roa (hash: kSV2htK/TB9FGgHOzLvBWeHTLFTLf67Ynu1IuSCMkQQ=)
                          4: mhe7ueS03W2XSdgcfakYwSroXsA.roa (hash: ldAOnBa8GgZlBCGXaADvQnAefafOoOly2oTch4zw0Po=)
                          5: p_6B25_VKSLLKGO8pJavxamR_Zk.roa (hash: dGxJlqoeHwqEbdInIyeGdbnWpjNL9vFVb47ETgyLdAc=)
                          6: u6zwrz1fIMPIG6Fq4E3yGzATiH0.roa (hash: WU20DcSmscAh/PhHLfFRUUagNsUT2dCDLJJdqOdtdKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 02:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:21:3a:e1:ac:1b:43:80:a1:6d:8d:c8:4d:cf:54:65:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
        Validity
            Not Before: Feb  3 02:00:32 2026 GMT
            Not After : Feb  4 02:00:32 2026 GMT
        Subject: CN=09475b6f29070cfa6d216d79942ab9e9d7e29780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:10:fe:17:bf:69:1e:f8:1f:cc:a7:e6:d2:21:
                    eb:ca:be:1c:29:19:8e:1e:fb:63:e3:d2:39:5c:6f:
                    7b:ea:f4:78:b5:46:50:81:4e:fd:2c:0d:fd:d5:68:
                    72:ed:a6:da:12:19:e5:7a:09:5b:ff:0f:7c:36:45:
                    29:59:ba:d0:2f:12:d7:f5:85:9d:d6:af:de:cb:da:
                    a8:fd:a9:0c:d7:95:99:da:c1:5b:13:0b:9c:5e:bb:
                    4b:35:b1:28:cb:4d:0c:d5:36:16:9d:fb:1d:ff:3e:
                    da:62:c8:fc:c2:f7:bf:ef:a3:1b:92:be:ab:88:90:
                    1e:15:dc:d8:3a:51:96:e8:c9:6d:cc:30:85:0a:b1:
                    09:b1:f3:9b:fe:e4:26:ba:fd:14:82:b1:64:48:a2:
                    cf:65:da:c2:8e:63:04:66:2c:d3:75:49:e0:fc:e9:
                    3c:3c:f4:d8:c4:84:aa:58:be:b5:89:ef:61:8b:0c:
                    bc:35:81:22:31:62:3e:90:c3:0f:3e:ba:06:ec:80:
                    f3:5e:e4:3c:e7:7e:72:29:91:fc:1c:1b:d0:81:39:
                    52:0f:88:10:da:a3:b0:a0:04:79:d6:41:ab:59:a4:
                    f7:c3:5f:e1:32:12:1e:26:6c:53:18:e6:99:71:09:
                    65:a2:d5:ce:af:49:34:13:cb:ab:b9:58:14:30:3f:
                    65:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:47:5B:6F:29:07:0C:FA:6D:21:6D:79:94:2A:B9:E9:D7:E2:97:80
            X509v3 Authority Key Identifier:
                keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f3:fc:1b:92:09:57:0c:4c:bd:c2:dc:9e:29:70:3b:5f:61:
         20:4a:3a:8f:d2:c5:17:7b:30:1b:d2:aa:4f:71:a9:d8:5b:22:
         21:12:9f:3e:6e:e0:4f:c2:ca:17:4f:4d:f8:50:f4:3b:09:9f:
         7c:74:f4:ab:af:73:9a:be:62:1b:58:56:1b:d8:c1:28:bc:15:
         06:a1:89:46:a0:64:13:40:aa:79:0f:95:d0:78:91:05:d5:1e:
         95:fe:86:89:a0:04:8b:c1:e0:c2:25:98:bc:72:9b:b1:34:ca:
         8e:96:ac:1c:0b:3c:82:52:24:9d:d7:4b:ce:c8:6c:87:3a:35:
         4f:94:dc:1a:df:df:25:30:0d:89:28:74:ac:b9:3f:7c:22:1d:
         b1:7c:c6:45:cd:e8:09:21:5c:c8:36:8f:0b:01:b6:84:64:51:
         94:01:74:0d:45:ac:06:b9:69:a0:36:ba:81:1f:b5:b5:73:3b:
         49:f8:1f:bd:a1:91:99:41:c2:fb:16:5e:4f:45:23:dd:00:a3:
         d0:66:5b:71:bc:64:f3:47:c1:3e:d4:6d:58:c5:3b:7a:01:8b:
         82:e8:36:6f:8e:37:be:d0:b8:2a:8a:5c:4b:c4:92:29:a0:7e:
         92:9a:31:96:5b:34:68:a2:ed:4a:b7:82:5f:a0:25:ab:38:3f:
         dc:f8:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 12:42:15 2026 by rpki-client